AWS SSO IDp For OpenSearch

Question

We are using AWS SSO with Google Workspace to log into AWS.

We also have OpenSerch in use. We want to use AWS SSO as an IDP for OpenSearch however we get the following error

```
Oops, something went wrong
Provide your administrator with the following info:
No access
Request ID: xxxx
HTTP status: 403
```
The 403 call is when a GET is made on https://portal.sso.eu-west-1.amazonaws.com/saml/v2/assertion/xxxxxredactedxxxxx/ HTTP/1.1

Answer

Hello

Not sure if you ve referred the below links for the same.
AWS SSO with G-suite as an External IDP: https://aws.amazon.com/blogs/security/how-to-use-g-suite-as-external-identity-provider-aws-sso/

SAML with AWS Open-search: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/saml.html

These provide the basic steps for configuration & the right approach. However for a detailed check, I would advise to open up a support case with the AWS SSO/AWS Opensearch team and get it checked, once verified the steps in the above links.

AWS SSO IDp For OpenSearch

Relevant content